[Date Prev][Date Next][Thread Prev][Thread Next][Thread Index]

Re: [fw1-gurus] LOG_CRIT Kernel errors.



I wasn't able to find anything on this message, but rtmChains makes me think this is related to real time monitor. Are you running smartview monitor on this box? The only other thing I can suggest is opening a ticket with Check Point and letting a dev take a look at it. At a minimum, they'd probably want a sample of the traffic triggering this, so they can see what's special about those packets.
 
-----Original Message-----
From: Matthew MacAulay [mailto:[email protected]]
Sent: Friday, February 20, 2009 05:13 AM
To: [email protected]
Subject: [fw1-gurus] LOG_CRIT Kernel errors.

Hello, This morning I am seeing lots of LOG_CRIT errors, the hex values translate to IP addresses non of which I would count as being one of my customers. A couple of weeks ago, I had simular errors which were trying to use one of my public DNS servers as a recursive lookup as part of a DDOS attack, but in that instance one of the hex values was (as the destination) my DNS server. These messages are different and do not give me a clue as to what is going on. Can anyone shed any light? Or give me some pointers as to what is going on.. I am tempted to just block them at my perimeter routers but I would prefer to understand what the traffic is before I do that. Bf71015 = 191.113.1.5 Latin American and Caribbean IP, Mexco.. 62f71015 = 98.247.16.21 Comcast Cable Communications, Inc. 9fd0562c = 159.208.86.44 Sunlife Assurance Company of Canada Feb 20 09:58:03 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370 Feb 20 09:58:03 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370 Feb 20 09:58:05 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370 Feb 20 09:58:05 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370 Feb 20 09:58:07 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle bf71015 - entry used for handle 62f71015 with value 9fd0562c Feb 20 09:58:07 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle bf71015 - entry used for handle 62f71015 with value 9fd0562c Feb 20 09:58:07 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370 Feb 20 09:58:07 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370 Feb 20 09:58:10 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370 Feb 20 09:58:10 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370 Regards, Mat. ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System and delivered to you by Cobweb Solutions, Europe's leading provider of Microsoft Hosted Exchange. Discover how Hosted Exchange could help your business at http://www.hostedexchange.co.uk/ VAT No. 682 2512 41 Registered office address: South Wing, Delme Place, Fareham, Hants, PO16 8UX Registered in England No. 3283443 Registered with: Companies House, Crown Way, Cardiff, CF14 3UZ ______________________________________________________________________ _______________________________________________ fw1-gurus mailing list [email protected] http://lists.phoneboy.com/listinfo.cgi/fw1-gurus-phoneboy.com
_______________________________________________
fw1-gurus mailing list
[email protected]
http://lists.phoneboy.com/listinfo.cgi/fw1-gurus-phoneboy.com